From 334d807b924427434b42d4fbae745d3d1b38a218 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Tue, 10 Jan 2017 02:17:16 +0000 Subject: Types fix, first pass XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work) --- doc/s6-tlsc.html | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) (limited to 'doc/s6-tlsc.html') diff --git a/doc/s6-tlsc.html b/doc/s6-tlsc.html index d40820c..39f4680 100644 --- a/doc/s6-tlsc.html +++ b/doc/s6-tlsc.html @@ -126,10 +126,7 @@ two more environment variables: KEYFILE contains the path to a file containing the private key, DER- or PEM-encoded; and CERTFILE contains the path to a file containing the client certificate, DER- or -PEM-encoded. Please note that for now, support for client -certificates is experimental, and only works -with the LibreSSL -backend (BearSSL does not support client certificates yet). +PEM-encoded.

@@ -229,8 +226,7 @@ and break the connection when prog sends EOF.

  • -s : transmit EOF by half-closing the TCP connection without using close_notify. This is the default.
  • -Y : Do not send a client certificate. This is the default.
    • -
  • -y : Send a client certificate. This is experimental and -for now unsupported by BearSSL.
    • +
  • -y : Send a client certificate.
  • -k servername : use Server Name Indication, and send servername. The default is not to use SNI, which may be a security risk.
    • -- cgit v1.2.3